Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/fqRmrtuz13ODlmLGDe9t0EzTC2k.roa
File:                     fqRmrtuz13ODlmLGDe9t0EzTC2k.roa (raw, json)
Hash identifier:          64hbi9+HIJm/kLpoUgEqNOzGJ9fS6YxGUDhTSPkRqhc=
Subject key identifier:   7E:A4:66:AE:DB:B3:D7:73:83:96:62:C6:0D:EF:6D:D0:4C:D3:0B:69
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       0FDEFFDC
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/fqRmrtuz13ODlmLGDe9t0EzTC2k.roa
Signing time:             Sat 01 Jan 2022 14:59:40 +0000
ROA not before:           Sat 01 Jan 2022 14:59:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     136620
IP address blocks:        2a06:e881:7700::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266272732 (0xfdeffdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Jan  1 14:59:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ea466aedbb3d773839662c60def6dd04cd30b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:b6:42:aa:60:0f:a6:a5:43:bd:ae:8e:a6:
                    23:ee:eb:1b:b6:06:94:b1:ef:b4:99:a9:97:90:0d:
                    d4:14:d9:52:f8:91:43:f9:8f:19:e8:54:9e:59:7b:
                    8c:b0:13:66:7f:13:07:de:0c:e0:76:12:cb:28:60:
                    32:c3:e3:f7:88:19:bc:f0:c2:88:f3:71:6e:b8:81:
                    74:af:54:53:c6:f2:ba:82:ed:f3:c9:4c:86:fc:b9:
                    f1:48:12:ea:f3:06:26:10:48:5b:c7:52:90:1b:55:
                    5c:06:ae:a5:01:7a:b5:5b:83:d6:ce:32:05:62:41:
                    58:d5:e2:df:d9:54:82:1a:86:a7:69:8d:95:18:e9:
                    8d:af:bb:99:c5:0a:fa:ad:0a:d5:c2:48:49:d5:3c:
                    4d:c7:81:40:96:be:80:b3:78:c8:78:f2:39:4f:88:
                    36:0d:6f:da:d5:6c:28:d2:b3:d8:b0:47:fb:07:ad:
                    3a:77:09:f3:36:bd:d3:cd:2b:24:04:55:18:1f:ba:
                    d4:d7:9d:4d:82:c6:2f:31:5c:8e:df:bc:93:a0:1e:
                    56:0e:d8:d1:80:33:50:dc:4e:8f:0b:32:49:21:ea:
                    8f:cf:a4:61:f6:c3:f8:13:d4:c8:94:32:12:b3:a0:
                    d4:f0:82:b8:45:b0:5d:60:b5:78:9a:0b:81:7c:cd:
                    45:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A4:66:AE:DB:B3:D7:73:83:96:62:C6:0D:EF:6D:D0:4C:D3:0B:69
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/fqRmrtuz13ODlmLGDe9t0EzTC2k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:7700::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:d4:2b:2e:ff:e2:de:b8:a7:0c:99:b6:88:63:1d:c5:c9:27:
         2f:af:ba:68:7e:71:58:f7:c7:48:d0:15:ec:2a:f7:9f:97:0c:
         ba:e9:69:0c:b2:a6:9f:06:b6:58:cd:22:91:8d:4c:fa:3a:54:
         58:20:86:ef:af:13:16:d0:25:f5:2d:58:89:c7:ad:a4:a0:31:
         72:e4:65:8c:4d:6e:56:67:49:33:04:f4:df:c5:82:ae:1c:a0:
         e3:2b:87:95:2d:0d:bc:06:74:4d:42:50:b2:ab:58:0f:47:7c:
         b8:0f:fe:88:ac:29:de:4b:c1:de:de:d4:e4:31:2b:2d:fc:af:
         51:55:3e:97:55:4b:02:0d:25:37:1a:d0:c8:88:d5:da:32:e1:
         57:95:2d:ca:d0:a6:dc:24:d9:7a:0e:49:fa:95:aa:5e:f5:36:
         6b:c8:24:15:b9:b1:36:8e:c2:4c:a4:8b:ee:d4:5f:2d:2b:b0:
         bb:f4:f6:2c:eb:82:92:5b:58:36:8f:bd:11:e1:af:a4:a9:cf:
         83:5b:fe:6e:55:c8:02:25:0e:5f:36:5a:50:9e:65:01:f3:26:
         95:b2:1c:ae:c4:c5:c1:51:b3:5d:ce:c0:de:ed:67:78:02:26:
         e0:5d:a4:23:2a:1c:fa:a8:45:df:75:42:ef:07:69:4c:0e:ea:
         66:dd:dd:70
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIED97/3DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ODA3NGI0MTllYWQ0Y2VmZWEyZjJhZDJjMjU5ZDk3OGM1ZWQ3OTU0MB4XDTIyMDEw
MTE0NTk0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2VhNDY2YWVkYmIz
ZDc3MzgzOTY2MmM2MGRlZjZkZDA0Y2QzMGI2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMDQtkKqYA+mpUO9ro6mI+7rG7YGlLHvtJmpl5AN1BTZUviR
Q/mPGehUnll7jLATZn8TB94M4HYSyyhgMsPj94gZvPDCiPNxbriBdK9UU8byuoLt
88lMhvy58UgS6vMGJhBIW8dSkBtVXAaupQF6tVuD1s4yBWJBWNXi39lUghqGp2mN
lRjpja+7mcUK+q0K1cJISdU8TceBQJa+gLN4yHjyOU+INg1v2tVsKNKz2LBH+wet
OncJ8za9080rJARVGB+61NedTYLGLzFcjt+8k6AeVg7Y0YAzUNxOjwsySSHqj8+k
YfbD+BPUyJQyErOg1PCCuEWwXWC1eJoLgXzNRSsCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBR+pGau27PXc4OWYsYN723QTNMLaTAfBgNVHSMEGDAWgBS4B0tBnq1M7+ov
KtLCWdl4xe15VDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VBZExRWjZ0VE9fcUx5clN3bG5aZU1YdGVWUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWIvMWU0M2U0LWQwNmUtNGE1NS1iZGI2LTNkOTFlZGU1YjJiMS8x
L2ZxUm1ydHV6MTNPRGxtTEdEZTl0MEV6VEMyay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIv
MWU0M2U0LWQwNmUtNGE1NS1iZGI2LTNkOTFlZGU1YjJiMS8xL3VBZExRWjZ0VE9f
cUx5clN3bG5aZU1YdGVWUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoG6IF3MA0GCSqGSIb3DQEBCwUA
A4IBAQAh1Csu/+LeuKcMmbaIYx3FyScvr7pofnFY98dI0BXsKveflwy66WkMsqaf
BrZYzSKRjUz6OlRYIIbvrxMW0CX1LViJx62koDFy5GWMTW5WZ0kzBPTfxYKuHKDj
K4eVLQ28BnRNQlCyq1gPR3y4D/6IrCneS8He3tTkMSst/K9RVT6XVUsCDSU3GtDI
iNXaMuFXlS3K0KbcJNl6Dkn6lape9TZryCQVubE2jsJMpIvu1F8tK7C79PYs64KS
W1g2j70R4a+kqc+DW/5uVcgCJQ5fNlpQnmUB8yaVshyuxMXBUbNdzsDe7Wd4Aibg
XaQjKhz6qEXfdULvB2lMDupm3d1w
-----END CERTIFICATE-----